@outerlayer/cli 0.8.0 → 0.8.2

package/dist/{chunk-IJBVPLZZ.js → chunk-VUGDEUMM.js}

@@ -1,26 +1,27 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-ABIWDUMS.js';
-import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-7VNURP6M.js';
+import { decideInstalledSwitch, fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-IS4DIGBQ.js';
+import { compareVersions, satisfiesRange } from './chunk-I2UOAV7X.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-M2F2RAMK.js';
 import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-T6OIJQRT.js';
 import { RUNNER_PROTOCOL } from './chunk-AIW6GLET.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UGP76IZ5.js';
-import { placeholderQueues, placeholderProblem } from './chunk-IRCBTGWF.js';
-import { readMarker, currentVersion, removeMarker, writeMarker, entryIn, versionDir, switchCurrent, cleanVersions, isInLayout, startedThroughCurrent, stagingDir } from './chunk-TI7B7UEO.js';
+import { placeholderQueues, placeholderProblem } from './chunk-QJPO42VI.js';
+import { currentVersion, entryIn, versionDir, startedThroughCurrent, writeMarker, readMarker, removeMarker, switchCurrent, cleanVersions, isInLayout, stagingDir } from './chunk-TI7B7UEO.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-CM5QTKM4.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-EQG7L6LM.js';
 import { checkFit } from './chunk-JKIWMRFH.js';
 import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
-import { spawnRun } from './chunk-U3GOI2B4.js';
-import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-5TNS3PL7.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-5QLNZGAQ.js';
-import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind } from './chunk-PWBILI5P.js';
+import { spawnRun } from './chunk-NPBLDMSD.js';
+import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-CLURXEWV.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-R5SPFO6F.js';
+import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind } from './chunk-7KI224YS.js';
 import { exceedsDisk } from './chunk-7RQ73DLO.js';
-import { sharedUserEnvironment, JOB_MOUNT, claudeCredential } from './chunk-OD2VTIHN.js';
+import { sharedUserEnvironment, JOB_MOUNT, claudeCredential } from './chunk-2FWL7CE2.js';
 import { parseClaimIdentity } from './chunk-HKMPVPO7.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
-import { loadHostKey, ensureHostKey, signerFor } from './chunk-M5POMKKW.js';
+import { loadHostKey, ensureHostKey, signerFor } from './chunk-V7NIVOFD.js';
 import { RUNNER_DIR_MODE, runnerDir, buildDir, attemptStamp, jobDir, jobsDir, pidFilePath, spoolDir, RUNNER_FILE_MODE, rootfsDir } from './chunk-ZM2IMMYN.js';
 import { HOOKS_DIR_NAME, writeCommitHooks } from './chunk-XCCLFVXM.js';
 import { randomBytes } from 'crypto';
@@ -189,133 +190,6 @@ function writeLastUpdate(configPath, update) {
 `, { mode: RUNNER_FILE_MODE });
   renameSync(temporary, path);
 }
-
-// src/runner/update/version-order.ts
-function parse(version) {
-  const match = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(version);
-  if (match === null) return void 0;
-  return { core: [Number(match[1]), Number(match[2]), Number(match[3])], pre: match[4] };
-}
-function comparePre(a, b) {
-  const left = a.split(".");
-  const right = b.split(".");
-  for (let i = 0; i < Math.max(left.length, right.length); i++) {
-    const x = left[i];
-    const y = right[i];
-    if (x === void 0) return -1;
-    if (y === void 0) return 1;
-    const xNum = /^\d+$/.test(x);
-    const yNum = /^\d+$/.test(y);
-    if (xNum && yNum) {
-      const difference = Number(x) - Number(y);
-      if (difference !== 0) return Math.sign(difference);
-    } else if (xNum !== yNum) {
-      return xNum ? -1 : 1;
-    } else if (x < y) {
-      return -1;
-    } else if (x > y) {
-      return 1;
-    }
-  }
-  return 0;
-}
-function compareVersions(a, b) {
-  const left = parse(a);
-  const right = parse(b);
-  if (left === void 0 || right === void 0) return void 0;
-  for (let i = 0; i < 3; i++) {
-    const difference = left.core[i] - right.core[i];
-    if (difference !== 0) return Math.sign(difference);
-  }
-  if (left.pre === right.pre) return 0;
-  if (left.pre === void 0) return 1;
-  if (right.pre === void 0) return -1;
-  return comparePre(left.pre, right.pre);
-}
-function compareCores(a, b) {
-  for (let i = 0; i < 3; i++) {
-    const difference = a[i] - b[i];
-    if (difference !== 0) return Math.sign(difference);
-  }
-  return 0;
-}
-function parsePartial(text) {
-  if (text === "" || text === "*" || text === "x" || text === "X") return [];
-  const match = /^v?(\d+|[xX*])(?:\.(\d+|[xX*]))?(?:\.(\d+|[xX*]))?$/.exec(text);
-  if (match === null) return void 0;
-  const numbers = [];
-  for (const part of [match[1], match[2], match[3]]) {
-    if (part === void 0 || !/^\d+$/.test(part)) break;
-    numbers.push(Number(part));
-  }
-  return numbers;
-}
-function bumpLast(numbers) {
-  const core = [numbers[0] ?? 0, numbers[1] ?? 0, numbers[2] ?? 0];
-  const last = numbers.length - 1;
-  core[last] = core[last] + 1;
-  for (let i = last + 1; i < 3; i++) core[i] = 0;
-  return core;
-}
-function fill(numbers) {
-  return [numbers[0] ?? 0, numbers[1] ?? 0, numbers[2] ?? 0];
-}
-function meets(version, comparator) {
-  const match = /^(>=|<=|>|<|=|\^|~)?(.*)$/.exec(comparator);
-  const op = match[1] ?? "";
-  const numbers = parsePartial(match[2]);
-  if (numbers === void 0) return void 0;
-  if (numbers.length === 0) return op === "" || op === "=" || op === ">=" || op === "<=" ? true : void 0;
-  const low = fill(numbers);
-  const whole = numbers.length === 3;
-  switch (op) {
-    case ">=":
-      return compareCores(version, low) >= 0;
-    case ">":
-      return whole ? compareCores(version, low) > 0 : compareCores(version, bumpLast(numbers)) >= 0;
-    case "<":
-      return compareCores(version, low) < 0;
-    case "<=":
-      return whole ? compareCores(version, low) <= 0 : compareCores(version, bumpLast(numbers)) < 0;
-    case "~":
-      return compareCores(version, low) >= 0 && compareCores(version, bumpLast(numbers.slice(0, Math.min(numbers.length, 2)))) < 0;
-    case "^": {
-      let pivot = numbers.findIndex((n) => n !== 0);
-      if (pivot === -1) pivot = numbers.length - 1;
-      return compareCores(version, low) >= 0 && compareCores(version, bumpLast(numbers.slice(0, pivot + 1))) < 0;
-    }
-    default:
-      return compareCores(version, low) >= 0 && (whole ? compareCores(version, low) <= 0 : compareCores(version, bumpLast(numbers)) < 0);
-  }
-}
-function satisfiesRange(version, range) {
-  const parsed = parse(version.trim().replace(/^v/, ""));
-  if (parsed === void 0 || parsed.pre !== void 0) return void 0;
-  let anyUnreadable = false;
-  for (const alternative of range.split("||")) {
-    if (/\s-\s/.test(alternative)) {
-      anyUnreadable = true;
-      continue;
-    }
-    const comparators = alternative.trim().replace(/(>=|<=|>|<|=|\^|~)\s+/g, "$1").split(/\s+/).filter((c) => c !== "");
-    if (comparators.length === 0) comparators.push("*");
-    let all = true;
-    for (const comparator of comparators) {
-      const met = meets(parsed.core, comparator);
-      if (met === void 0) {
-        anyUnreadable = true;
-        all = false;
-        break;
-      }
-      if (!met) {
-        all = false;
-        break;
-      }
-    }
-    if (all) return true;
-  }
-  return anyUnreadable ? void 0 : false;
-}
 var RELEASE_REPOSITORY = "https://github.com/outerlayerai/outerlayer";
 var RELEASE_WORKFLOW_PATH = ".github/workflows/outerlayer-release.yml";
 var UpdateStepError = class extends Error {
@@ -588,6 +462,7 @@ function settleUpdate(args) {
 
 // src/runner/housekeeping/docker.ts
 var KIND_LABEL = "ai.outerlayer.kind";
+var NO_BUILDER = /no builder .* found/i;
 function failure(result, what) {
   return new Error(`${what}: ${result.stderr.trim() || `docker exited ${result.status}`}`);
 }
@@ -679,8 +554,12 @@ function createHousekeepingDocker(deps) {
       if (result.status !== 0) throw failure(result, `docker rmi ${id}`);
     },
     async builderPrune(keepBytes) {
+      const inspected = await run("docker", ["buildx", "inspect", deps.builder]);
+      if (inspected.status !== 0 && NO_BUILDER.test(inspected.stderr)) return void 0;
+      const status = inspected.status === 0 ? /^Status:\s*(\S+)/m.exec(inspected.stdout)?.[1] : void 0;
+      if (status !== void 0 && status !== "running") return void 0;
       const result = await run("docker", ["buildx", "prune", "--builder", deps.builder, "--force", "--max-used-space", String(keepBytes)]);
-      if (result.status !== 0 && /no builder .* found/i.test(result.stderr)) return { freedBytes: 0 };
+      if (result.status !== 0 && (NO_BUILDER.test(result.stderr) || /driver not running/i.test(result.stderr))) return void 0;
       if (result.status !== 0) throw failure(result, "docker buildx prune");
       return { freedBytes: parsePrunedBytes(result.stdout) };
     }
@@ -851,8 +730,12 @@ async function runHousekeeping(options) {
     if (options.buildCacheMax !== "off") {
       try {
         const pruned = await docker.builderPrune(options.buildCacheMax);
-        freed += pruned.freedBytes;
-        log.line(`housekeeping: pruned the image builder's build cache down to ${formatBytes(options.buildCacheMax)}, freed ${formatBytes(pruned.freedBytes)}`);
+        if (pruned === void 0) {
+          log.line("housekeeping: the image builder is not running, so its build cache is left for a later pass");
+        } else {
+          freed += pruned.freedBytes;
+          log.line(`housekeeping: pruned the image builder's build cache down to ${formatBytes(options.buildCacheMax)}, freed ${formatBytes(pruned.freedBytes)}`);
+        }
       } catch (err) {
         log.error(`housekeeping: the build cache could not be pruned: ${describeCallFailure(err)}`);
       }
@@ -1097,6 +980,48 @@ function reportUpdateResult(state, version, result) {
   const retryAt = new Date(result.retryAtMs).toISOString().slice(11, 16);
   logOf(state).error(`could not update to ${version}: ${result.detail} \xB7 attempt ${result.attempts}, trying again after ${retryAt} UTC`);
 }
+function restartOntoInstalled(state) {
+  const update = state.deps.update;
+  if (update === void 0) return false;
+  const configPath = state.config.configPath;
+  const own = ownVersionOf(state.deps);
+  const current = currentVersion(configPath);
+  const decision = decideInstalledSwitch({
+    own,
+    current,
+    fromCurrent: startedThroughCurrent(configPath, update.entryPath),
+    underService: update.underService === true,
+    installed: current !== void 0 && existsSync(entryIn(versionDir(configPath, current)))
+  });
+  if (decision.kind === "none") {
+    state.installedSwitch = void 0;
+    return false;
+  }
+  const said = `${decision.kind}:${decision.to}`;
+  const first = state.installedSwitch !== said;
+  state.installedSwitch = said;
+  const log = logOf(state);
+  if (decision.kind === "missing") {
+    if (first) log.error(`current names ${decision.to}, which is not installed \xB7 staying on ${own}; run \`outerlayer runner install\` again`);
+    return false;
+  }
+  if (decision.kind === "foreground") {
+    if (first) log.line(`${decision.to} is installed and current names it \xB7 this runner keeps running ${own} until it is restarted`);
+    return false;
+  }
+  if (state.jobs.size > 0) {
+    if (first) log.line(`${decision.to} is installed \xB7 taking no new work, restarting onto it once ${state.jobs.size} running build(s) finish`);
+    return true;
+  }
+  try {
+    writeMarker(configPath, { from: own, to: decision.to, starts: 0 });
+  } catch (err) {
+    log.error(`could not write the update marker, so ${decision.to} starts without going back to ${own} if its checks fail: ${describeCallFailure(err)}`);
+  }
+  log.line(`restarting ${own} -> ${decision.to}, which runner install put in place`);
+  (state.exitForUpdate ?? (() => update.exit(RESTART_EXIT_STATUS)))();
+  return true;
+}
 async function updateWhenIdle(state) {
   const update = state.deps.update;
   const version = state.pendingUpdate;
@@ -1250,6 +1175,7 @@ async function housekeepingPass(state) {
 }
 async function runTick(state) {
   reloadConfig(state);
+  if (restartOntoInstalled(state)) return;
   if (await updateWhenIdle(state)) return;
   if (holdWhenBlocked(state)) return;
   if (holdOffForDisk(state)) return;
@@ -1306,7 +1232,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-B3FOXZAL.js');
+  const { postJson: postJson2 } = await import('./work-cmd-W4GQUUBC.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -2030,7 +1956,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-FOF3PUKI.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-HQHFAOXW.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });
@@ -2072,6 +1998,8 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const adopted = { job, dirPath, lastRenewAtMs: nowMs(), cmd: null, cpuSample: null, ending: false };
     state.jobs.set(dirPath, adopted);
     if (job.container !== void 0) {
+      const cores = job.container.cpuset === void 0 ? void 0 : parseCpuList(job.container.cpuset);
+      if (cores !== void 0) runtimeOf(state).cpus.hold(job.container.buildId, cores);
       const tokens = buildTokensFor(state, adopted, job.item);
       runtimeOf(state).credentials.set(dirPath, tokens);
       await ensureTunnel(runtimeOf(state), job.container, dirPath, config, job.itemKey, job.branch);

package/dist/{chunk-4ACZCY4I.js → chunk-WMPO3SKK.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, connectedLine } from './chunk-ILEA3YHM.js';
-import { resolveRepoIdentity } from './chunk-GAYWY4GI.js';
-import { resolveGatewayCredentials } from './chunk-BOLTI6LR.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, connectedLine } from './chunk-EWBM2USM.js';
+import { resolveRepoIdentity } from './chunk-HN2JBGSI.js';
+import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 

package/dist/{chunk-TTNFGMHO.js → chunk-Y7UQHKFY.js}

@@ -111,6 +111,24 @@ async function fetchCommit(input) {
     return { ok: false, reason: `the fetch of ${input.commit.slice(0, 8)} from ${input.remote} failed: ${detail}` };
   }
 }
+async function diffBetween(input) {
+  const credential = input.token === void 0 ? void 0 : tokenSettings(input.remote, input.token);
+  try {
+    mkdirSync(input.dir, { recursive: true, mode: RUNNER_DIR_MODE });
+    await git(input.dir, ["init", "--quiet"]);
+    await git(input.dir, ["fetch", "--quiet", "--no-tags", "--filter=blob:none", input.remote, input.base, input.head], CLONE_TIMEOUT_MS, credential);
+    await git(
+      input.dir,
+      ["diff", "--no-ext-diff", "--no-textconv", "--no-color", "--binary", `--output=${input.output}`, `${input.base}...${input.head}`],
+      CLONE_TIMEOUT_MS,
+      credential
+    );
+    return { ok: true };
+  } catch (err) {
+    const detail = (err instanceof Error ? err.message : String(err)).replace(/^git [\w-]+ failed: /, "").split("\n")[0];
+    return { ok: false, reason: `the diff of ${input.head.slice(0, 8)} from ${input.base.slice(0, 8)} could not be read from ${input.remote}: ${detail}` };
+  }
+}
 var CLONE_TIMEOUT_MS = 6e5;
 async function cloneRepository(remote, dest, timeoutMs = CLONE_TIMEOUT_MS) {
   mkdirSync(dirname(dest), { recursive: true, mode: RUNNER_DIR_MODE });
@@ -485,4 +503,4 @@ async function prune(host, repository, repoRecords, keep, runnerDirPath) {
   return removed;
 }
 
-export { buildRepositoryImage, cloneRepository, fetchCommit, readBranchHead, readDefaultBranchHead };
+export { buildRepositoryImage, cloneRepository, diffBetween, fetchCommit, readBranchHead, readDefaultBranchHead };

package/dist/{chunk-BCLJSQCV.js → chunk-YO4PSLVB.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readCloudConfig, cloudConfigPath } from './chunk-EABW6AJQ.js';
-import { signRunnerRequest, signerFor } from './chunk-M5POMKKW.js';
+import { signRunnerRequest, signerFor } from './chunk-V7NIVOFD.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 
 createRequire(import.meta.url);

package/dist/{chunk-AIL2R4SI.js → chunk-YU4Z2O3W.js}

@@ -5,16 +5,16 @@ import { RepoFilter } from './chunk-TBT347UY.js';
 import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-ZYHKJKSU.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-GAYWY4GI.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-HN2JBGSI.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-GQD22KKN.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
-import { defaultFetch } from './chunk-BCLJSQCV.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-BOLTI6LR.js';
+import { defaultFetch } from './chunk-YO4PSLVB.js';
+import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
 import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-YNJEOGDL.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
-import { signerFor, signRunnerRequest } from './chunk-M5POMKKW.js';
-import { writeSyncStatus, spoolDir } from './chunk-JPR2WHHF.js';
+import { signerFor, signRunnerRequest } from './chunk-V7NIVOFD.js';
+import { writeSyncStatus, spoolDir } from './chunk-KI7VPNKC.js';
 import { removeJournalHooks } from './chunk-XCCLFVXM.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-ZZXLM64C.js → chunk-ZJ3WRVRG.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-7ZR5UPMB.js';
+import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-CMFCCIQN.js';
 import { readFileSync, existsSync, writeFileSync, mkdirSync, utimesSync, statSync, unlinkSync } from 'fs';
 import { join, dirname } from 'path';